This policy is published by Igreja Assembleia de Deus (Africana)(“ADA”, “we”, “us”), Bairro da Coop, Rua “E”, Nº 40, Maputo, Mozambique, part of ZAOGA Forward in Faith Ministries International.

It covers the services we run:

• the My ADA mobile app for iOS and Android;
• this website, ada.org.mz, including its admin area;
• the ADA finance and church administration system at financas.ada.org.mz.

Questions about this policy or your data: info@ada.org.mz, or +258 85 761 8582.

Information you give us

• Account details: your name, phone number, email address, gender and date of birth (if you add them), profile photo, and a password (stored only as a one-way hash).
• Church membership: the assembly, district and province you belong to, and the role you hold, if any.
• Giving records: contributions (tithes, offerings, pledges) recorded by you or by your assembly’s administrators, and the receipts for them.
• What you write in the app: chat messages, prayer requests and testimonies, notes, event responses, counselling requests and posts.
• Business listings: if you apply to list a business in the ACBF (Africa Christian Business Fellowship) directory, the business details you provide, including registration numbers (NUIT, NUEL), which are seen only by the ACBF administrators.
• Messages you send us through the website (contact form, helpline, live chat, media submissions, job applications).

Information from Google or Apple when you choose to sign in with them

• If you use “Continue with Google”, Google shares with us your name, your email address, whether that email is verified, your profile picture address and a unique Google account identifier. We do not ask for, and cannot see, your Google password, contacts, Gmail, Drive, calendar or any other Google data.
• If you use “Sign in with Apple”, Apple shares your name (the first time only), an email address (which may be a private relay address) and a unique Apple identifier.

Information collected automatically

• Device information needed to send you notifications (a push notification token) and to keep you signed in.
• Location, only when you allow it and only for the feature you are using: finding churches near you, confirming your church’s location, or pinning an event venue. We do not track your location in the background.
• Basic usage and error logs (pages visited, sign-in times, app version) used to keep the services secure and working.

• To create your account, sign you in and keep your account secure (including two-step sign-in and fraud prevention).
• To connect you with your assembly: church news, events, Big Sunday announcements, groups and chat.
• To record giving and send you receipts.
• To show the ACBF business directory and let the ACBF review business applications.
• To send notifications you can control in the app’s notification settings.
• To answer your messages and requests, and to meet our legal and accounting obligations.

We do not sell your personal information, and we do not use it for advertising.

When you sign in with Google, we use the data Google shares (name, email address, profile picture and Google account identifier) only to sign you in, to create or match your My ADA or ADA admin account, and to show your name and picture in your profile. We store your Google account identifier and email address with your account so you can sign in again; we do not store Google access or refresh tokens.

We do not transfer Google user data to anyone except as needed to provide the sign-in itself, to comply with the law, or with your consent. We do not use it for advertising, we do not sell it, and no person reads it except to support you when you ask for help.

ADA’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can stop using Google sign-in at any time and remove ADA’s access from your Google Account at myaccount.google.com/permissions.

• Within the church: the leaders and administrators responsible for your assembly, district or province see the membership and giving information they need for their role. Chat messages are seen by the people in that conversation.
• Public information you choose to publish: for example a business listing once the ACBF approves it, or a public testimony.
• Service providers who process data on our behalf, under contract: hosting (Amazon Web Services and Hetzner), push notifications (Expo, Google Firebase Cloud Messaging and Apple Push Notification service), email delivery, and WhatsApp messages through the Meta WhatsApp Business Platform for receipts.
• Sign-in providers: Google and Apple, only to confirm your sign-in.
• Authorities, when the law requires it.

We keep your account information while your account is open. Giving records are kept for as long as accounting and legal rules require. When you delete your account we delete or anonymise your personal information, except records we must keep by law.

Data is sent over encrypted connections (HTTPS). Passwords are stored as one-way hashes, access to administrative data is limited by role, and administrator accounts can be protected with two-step sign-in. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

• See and correct your details in the app’s Profile screen.
• Turn notifications off, or on, in the app’s notification settings.
• Refuse or withdraw location permission in your phone’s settings; the rest of the app keeps working.
• Delete your account from the app’s Profile screen, or by following the steps at financas.ada.org.mz/data-deletion, or by writing to info@ada.org.mz.
• Ask us for a copy of your data, or object to how we use it, by writing to the same address.

The My ADA app is meant for members aged 13 and over. Younger children may use it only with a parent or guardian. If you believe a child has given us information without permission, contact us and we will remove it.

We will update this page when our practices change and change the date at the top. For important changes we will also tell you in the app.